some fixes on authz